Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft
File:                     B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft (raw, json)
Hash identifier:          /lcvZQ7c19liUZ1H85vYCTU8IkQK/3bqXJ2PX4TEHEY=
Subject key identifier:   B0:E7:A3:8A:35:9D:D6:60:14:63:92:D4:46:23:F6:6E:78:C0:9D:4B
Authority key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89
Certificate issuer:       /CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89
Certificate serial:       564FA2640A1918727A172E332E9073403D620558
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft
Manifest number:          8E
Signing time:             Sat 25 Jul 2026 12:23:41 +0000
Manifest this update:     Sat 25 Jul 2026 12:18:41 +0000
Manifest next update:     Sun 26 Jul 2026 15:46:41 +0000
Files and hashes:         1: 34332e3233312e3136352e302f32342d3234203d3e203539303435.roa (hash: P2w3Cn8q6VBjPyjAE+aGySX201BOvmk4osx5NsrSLsM=)
                          2: 34332e3233312e3136362e302f32342d3234203d3e2034383038.roa (hash: Pb8V+5FTCdgjn6SiwLlLtlSOYYlOhjvC3VA+VAV8O8c=)
                          3: 34332e3233312e3136332e302f32342d3234203d3e203539303435.roa (hash: HlBnZJtRyN9WWrXETRSPEzDLZRrvouzm35CF758gaP0=)
                          4: 34332e3233312e3137302e302f32342d3234203d3e203233373234.roa (hash: DQqP/JMnMTlVRUIOIfUyrIq2HzHGNivtyoIhGcE1fgU=)
                          5: 34332e3233312e3136382e302f32342d3234203d3e203539303435.roa (hash: B4/9VepgzCAqS2VDHVYZOohdO8xJ6CFEpvbnisx0SuY=)
                          6: 34332e3233312e3136382e302f32342d3234203d3e2034383038.roa (hash: eO91F7hb156INMh0wkLF9i4co0ne3A8qbTScqpey0H8=)
                          7: 34332e3233312e3136392e302f32342d3234203d3e2034383038.roa (hash: WC6hkAfwb7PGjQi+Xc5kuTF3CQ7uP1+avO0icjfJOuI=)
                          8: 323430333a343238303a3a2f34382d3438203d3e203539303435.roa (hash: A9wLbcJvXASqzaeNLxcQMZsYx9mTSfRFmMcvE8+RJRg=)
                          9: 34332e3233312e3137302e302f32342d3234203d3e2034383038.roa (hash: 9m6TuvcMhFLuF6l6KNP/vCLSN7cJPoFDY1yMsJdOZms=)
                          10: 34332e3233312e3136302e302f32342d3234203d3e2034383038.roa (hash: eMSzssgVCrnjIF6VL8PSJ+HoJtZ3e3YyeZ8hFIcqN/Y=)
                          11: 3130332e3232372e3132332e302f32342d3234203d3e203233373234.roa (hash: 0AJrwoJqWyS7mm02LUhjXruCkjbSDcdGfNe21l9Twws=)
                          12: 34332e3233312e3136312e302f32342d3234203d3e203233373234.roa (hash: rjzSBfM4QFloW2G0lnm7U5heJ8Y10odYzplLbPiFyvw=)
                          13: 34332e3233312e3137302e302f32342d3234203d3e203539303435.roa (hash: ON/OMHXBvndmKDHTVNcxmsA4rCStsITi7ntUN0vX/M0=)
                          14: 3130332e3232372e3132322e302f32342d3234203d3e203233373234.roa (hash: /gTohF8KvDpAztOs0o8krBaVNqaJojl9cS4McTId4nk=)
                          15: 3130332e3232372e3132302e302f32332d3233203d3e2034383337.roa (hash: Sx+7NoTmtU5tLHhBcnSWpMNO747BDHdsVxguRe0fQqw=)
                          16: 34332e3233312e3136392e302f32342d3234203d3e203539303435.roa (hash: 4bufmTh61WaAmqfKiVanOVT2UB50zhRGG1caW8ZhWoI=)
                          17: 34332e3233312e3136322e302f32342d3234203d3e2034383038.roa (hash: ejDFxPmWT+05HCia7pY1Rse7RbdQUNfTamQE0Gdm3Jo=)
                          18: 34332e3233312e3136352e302f32342d3234203d3e2034383038.roa (hash: d/XWda+qAId3HrqJLJ/ELxQxJigM0ZDtn3cu5cPMToM=)
                          19: 3130332e3233342e35372e302f32342d3234203d3e2034383337.roa (hash: vdF+HI1oNr6kqh078qMmmr8oRIUvuhnWsColzplNCkA=)
                          20: 323430333a343238303a3a2f34382d3438203d3e2034383038.roa (hash: ULN0wtNAWUAoiI/+nHBlAPQmAmTvce/5E9zhhIxyRyk=)
                          21: 34332e3233312e3136342e302f32342d3234203d3e2034383038.roa (hash: uyXBkHjNtSnoZeCj7/Cxh8i8AfdLFlQpCwN7RMB6PU8=)
                          22: 34332e3233312e3136332e302f32342d3234203d3e203233373234.roa (hash: pcpus7lziotmJzbcDYGefZ16mC5ZQevR5pHmZItnRKo=)
                          23: 34332e3233312e3136372e302f32342d3234203d3e203233373234.roa (hash: A2ZcgYufZNsYqIVGV/dEfam7F/PbIk4Us5BfawUJzrQ=)
                          24: 34332e3233312e3136392e302f32342d3234203d3e203233373234.roa (hash: vohP9zABgWu50ks5+/FiNfLsUoOf43m8skFJ6SSVAxs=)
                          25: 34332e3233312e3136322e302f32342d3234203d3e203539303435.roa (hash: le6HeP8YIpiihcpiK4OmSEaq5HwNDyRlkrLrogtJAfM=)
                          26: 34332e3233312e3136332e302f32342d3234203d3e2034383038.roa (hash: DcHKH8AMXCvgpm186lSssTzK4qmxlvaVy6ZMdS2SLbo=)
                          27: 34332e3233312e3136302e302f32342d3234203d3e203233373234.roa (hash: 24FDnRvLCzn0ANWhhM/3WAQ1SR667x669CQVFjAXkT8=)
                          28: 3130332e3233342e35362e302f32342d3234203d3e2034383337.roa (hash: 81y+N8iirHBRsPfSRpGYFqPsiFIpyNpIgp6HeQiYS5w=)
                          29: 34332e3233312e3136372e302f32342d3234203d3e2034383038.roa (hash: MQCBmxAJSDHPnHo1i75aRqt3aiM6O3RFbLkUM1Vtt/Q=)
                          30: 34332e3233312e3136342e302f32342d3234203d3e203539303435.roa (hash: TRXaBDgn4/52ym6X+l5H4r05polWjFlZPvb9W1ytskA=)
                          31: 3130332e3233342e35362e302f32322d3232203d3e2034383337.roa (hash: m6QWCJVxxGzot6OqoJwSEys5DCxqMAuQiUrRofADMgg=)
                          32: 34332e3233312e3136372e302f32342d3234203d3e203539303435.roa (hash: /9Rp3paE32Mb7xbU1V9yI0KtWtVbueQdmeDgHK5tXtQ=)
                          33: 34332e3233312e3136362e302f32342d3234203d3e203539303435.roa (hash: 7js4KyKImpomSg+LF70j2/SfmbowekJ3CaRqBA+USmU=)
                          34: 34332e3233312e3136382e302f32342d3234203d3e203233373234.roa (hash: FERWDVlfu2BkKhCRK6RX8fqrYkNHGQ7nNw4fQbLjZLY=)
                          35: 34332e3233312e3136312e302f32342d3234203d3e203539303435.roa (hash: 358nj2S4xIzsoF5ZCAuIBT3be/At+L9A5PxfyFNWokY=)
                          36: B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl (hash: blXSDy3V7DyTTlcTXz5NwgABc6EJz1TDEBJonh0yzKk=)
                          37: 34332e3233312e3137312e302f32342d3234203d3e203539303435.roa (hash: EUbA6Gg+pJUPRNOqrh6PFcQ/lcvsOyFkVpMhKtDxR5Y=)
                          38: 34332e3233312e3136322e302f32342d3234203d3e203233373234.roa (hash: BdQR9FXri1FMEeb1fzW3vWWtY74O1uVL20hYCCh8JN8=)
                          39: 34332e3233312e3136312e302f32342d3234203d3e2034383038.roa (hash: 8nIeiB251IaYlgVWGWgYRtlBq7njmt2I6qe1VI8ltrQ=)
                          40: 323430333a343238303a3a2f34382d3438203d3e203233373234.roa (hash: JU3XnXtyT8UelE8ZUTUzJFF4EsTcd3qBE1P0ThkMbkc=)
                          41: 34332e3233312e3136302e302f32342d3234203d3e203539303435.roa (hash: k8nCn4GHRCXa4bAadqGp/HXrDu2HbCC1RzZ2PjlcArw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 22:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:4f:a2:64:0a:19:18:72:7a:17:2e:33:2e:90:73:40:3d:62:05:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89
        Validity
            Not Before: Jul 25 12:18:41 2026 GMT
            Not After : Jul 26 15:46:41 2026 GMT
        Subject: CN=B0E7A38A359DD660146392D44623F66E78C09D4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:16:32:78:30:2a:a5:86:94:4a:7a:c6:61:31:
                    30:c9:ce:62:0c:e0:a7:cb:93:20:ec:3d:94:45:57:
                    9f:8f:8f:b4:ca:c8:d0:86:9b:48:5b:47:7b:aa:52:
                    59:06:be:fa:aa:39:60:8e:20:cd:51:05:5a:98:c2:
                    3f:06:5b:41:c6:a9:d1:3d:17:09:e0:64:00:67:d2:
                    90:80:5d:e3:cf:d7:7c:b6:7f:d2:54:e4:a6:39:21:
                    e8:34:d1:3b:f5:5f:11:1d:06:2c:c7:96:72:9a:c2:
                    a2:14:3f:3a:46:4c:07:3b:69:7c:8d:3b:85:b3:67:
                    68:d7:e7:50:19:cb:b0:bf:19:7f:b4:13:12:06:fd:
                    76:00:4e:a3:36:a8:10:33:00:11:df:2b:d1:f7:c5:
                    3e:0c:b4:7a:df:df:1d:9b:73:aa:77:08:53:e7:64:
                    da:a1:da:2d:f9:a3:a3:71:92:fa:4d:b5:ea:72:bb:
                    87:78:c2:b9:57:ee:69:f6:55:cd:c1:da:dd:a5:0c:
                    30:a2:c7:0f:22:8b:30:60:ae:b1:18:f8:b3:c9:3d:
                    5a:27:20:b9:54:6a:78:70:63:2c:fd:8a:2b:ef:76:
                    44:c9:e6:2c:46:69:13:6f:c6:22:78:b8:2e:09:42:
                    2f:3f:5c:5f:92:e9:b7:87:58:3b:33:9b:8d:b6:80:
                    b2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E7:A3:8A:35:9D:D6:60:14:63:92:D4:46:23:F6:6E:78:C0:9D:4B
            X509v3 Authority Key Identifier:
                keyid:B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:13:6d:9b:e3:17:cf:7c:01:ed:c4:6a:5d:30:3e:30:5b:7c:
         0f:18:1d:cb:ca:8b:eb:1d:36:7d:08:d5:61:7e:af:1f:5e:a3:
         4f:b2:dc:88:d0:5c:d4:b7:02:a8:92:26:9a:d8:7a:68:d0:e8:
         c8:cd:c9:20:69:b1:b0:7f:52:88:8a:46:c3:39:db:62:10:c4:
         19:73:82:f0:12:98:9b:62:ee:64:d9:c7:15:cb:09:01:5a:41:
         bf:cb:d0:cc:47:6a:08:4f:81:df:03:2b:45:57:e0:de:d8:94:
         c5:cd:9f:d9:11:47:21:49:c2:50:e3:01:19:a1:be:3a:3b:24:
         e7:62:f6:55:c3:db:fe:98:fc:bb:86:39:12:25:44:cd:28:ad:
         2b:66:ef:c5:02:13:d7:a7:53:d2:61:43:22:2d:12:e0:5c:98:
         ce:12:7a:8f:9e:33:05:7b:f0:38:7c:13:d9:c6:ad:13:87:48:
         c3:8e:8f:58:f0:06:84:a2:6e:89:83:77:7f:f9:f2:ca:33:1f:
         20:a5:39:3a:93:ed:04:a3:c0:db:ff:59:02:e8:8d:6d:12:e8:
         e7:2e:08:fd:01:68:65:72:36:de:73:49:df:45:1f:9a:9f:ba:
         e2:17:8a:05:a2:7f:e1:ce:09:50:01:6a:ea:b7:a6:56:f5:b3:
         f4:d4:c3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 15:08:36 2026 by rpki-client